CVE-2022-2597 — Visual Portfolio < 2.19.0 - Contributor+ CSS Injection
The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.19.0 does not have proper authorisation checks in some of its REST endpoints, allowing users with a rol…
Published: 2022-09-05 · CVSS: Unscored
The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.19.0 does not have proper authorisation checks in some of its REST endpoints, allowing users with a role as low as contributor to call them and inject arbitrary CSS in arbitrary saved layouts
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7